Stateless OAuth State Store #1823
Description
The Node Slack SDK implements a ClearStateStore a stateless OAuth state store using JSON Web Tokens (JWT). It creates a secure, tamper-proof "ticket" (the state parameter) that a user carries during an OAuth handshake to ensure the login process is legitimate and hasn't timed out.
A python stateless OAuth state store can be greatly beneficial for apps that want to minimize the amount of storage they handle.
The Python SDK currently provides the OAuthStateUtils class that can be used to implement a version of this. But this approach is possibly incompatible with the existing StateStore interface, thus it is not supported out of the box in Bolt Python.
Category
- slack_sdk.web.WebClient (sync/async) (Web API client)
- slack_sdk.webhook.WebhookClient (sync/async) (Incoming Webhook, response_url sender)
- slack_sdk.models (UI component builders)
- slack_sdk.oauth (OAuth Flow Utilities)
- slack_sdk.socket_mode (Socket Mode client)
- slack_sdk.audit_logs (Audit Logs API client)
- slack_sdk.scim (SCIM API client)
- slack_sdk.rtm (RTM client)
- slack_sdk.signature (Request Signature Verifier)
Requirements
Please read the Contributing guidelines and Code of Conduct before creating this issue or pull request. By submitting, you are agreeing to those rules.